Syslog message

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Moderators: spender, PaX Team

Syslog message

Postby film » Thu Feb 23, 2017 4:33 am

Hi folks,

I always get the following error message in my syslog:

grsec: denied kernel module auto-load of ansi_cprng by uid 1000
grsec: denied kernel module auto-load of drbg by uid 1000


Any ideas?
film
 
Posts: 1
Joined: Thu Feb 23, 2017 4:29 am

Re: Syslog message

Postby spender » Thu Feb 23, 2017 8:06 am

These messages are from GRKERNSEC_MODHARDEN. If the modules listed are modules you want to have loaded on the system, then add:
modprobe ansi_cprng
modprobe drbg

to an init script. MODHARDEN prevents module auto-loads by unprivileged users, giving the administrator back control over what modules are allowed to be loaded by the system.

-Brad
spender
 
Posts: 2184
Joined: Wed Feb 20, 2002 8:00 pm
Location: VA, USA


Return to grsecurity support

cron